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Abstract 

We study the problem of wireless network resilience to node failures from a percolation-based perspective. In 
0^ \ practical wireless networks, it is often the case that the failure probability of a node depends on its degree (number 

' of neighbors). We model this phenomenon as a degree-dependent site percolation process on random geometric 

graphs. Due to its non-Poisson structure, degree-dependent site percolation is far from a trivial generalization of 
independent site percolation. Using coupling and renormalization method, we obtain analytical conditions for the 
existence of phase transitions within the degree-dependent failure model. Furthermore, in networks carrying traffic 
load, the failure of one node can result in redistribution of the load onto other nearby nodes. If these nodes fail 
due to excessive load, then this process can result in a cascading failure. Using a simple but descriptive model, 
OO ' we show that the cascading failure problem for large-scale wireless networks is equivalent to a degree-dependent 

site percolation on random geometric graphs. We obtain analytical conditions for cascades in this model. To 
our knowledge, this work represents the first investigation of cascading phenomena in networks with geometric 
constraints. 

O . I. Introduction 

CN ■ In large-scale wireless networks, nodes are often vulnerable to attacks, natural hazards, and resource 
> 

C depletion. The ability of wireless networks to maintain global communication in the face of these chal- 

lenges is a central concern for network designers. For this purpose, a network may be considered to be 

fsj functional if the size of the largest connected component of operational nodes grows linearly with the size 
O 

of the network. On the other hand, if the size of the largest operational component vanishes as a fraction 



O 

> 



of the network as the network size grows, then the network is not considered to be functional. A network 



^ ! may be said to be resilient if the remaining network is functional even after many node and link failures. 
c3 ^ For instance, if the wireless sensor network still manages to collect information from a constant fraction 
of the sensors even after a substantial number of node and link failures, then the network is resilient. On 
the other hand, if after many node and link failures, the sensor network breaks down into isolated parts 
where even the largest component can reach only a few other nodes, then the network is not considered 
to be resilient. ^From this perspective, the characterization of network resilience corresponds to the study 
of the qualitative and quantitative properties of the largest connected component. A powerful tool for this 
study stems from the theory of percolation [l]-[5]. Recently, percolation theory, especially continuum 
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percolation, has been widely used to study the coverage, connectivity, and capacity of large-scale wireless 
networks [6]-[15]. 

A percolation process resides in a random graph structure, where nodes or links are randomly designated 
as either "occupied" or "unoccupied." When the graph structure resides in continuous space, the resulting 
model is described by continuum percolation [l]-[3]. A major focus of continuum percolation theory is 
the random geometric graph induced by a Poisson point process with constant density A. A fundamental 
result for continuum percolation concerns a phase transition effect whereby the macroscopic behavior of 
the system is very different for densities below and above some critical value Ac. For A < Ac (subcritical 
or non-percolated), the connected component containing the origin (or any other fixed point) contains a 
finite number of points almost surely. For A > Ac (supercritical or percolated), the connected component 
containing the origin (or any other fixed point) contains an infinite number of points with a positive 
probability [l]-[4]. 

In this paper, we study the resilience of large-scale wireless networks to node failures from the 
percolation perspective. We first consider wireless networks with random, independent node failures. 
To see why this problem can be described by a percolation process on the network, note that in a network 
with random node failures, nodes are randomly occupied (operational) or unoccupied (failed), and the 
number of operational nodes that can successfully communicate with an extensive portion of the network 
is precisely the largest component of the corresponding percolation model. Hence, the phase transition 
phenomena of the percolation model directly translates to a description of the random failures model. 

In practical wireless networks, it is often the case that the failure probability of a node depends on 
its degree (number of neighbors). For instance, a wireless sensor node which must communicate with a 
large number of neighbors is more likely to deplete its energy reserve. A communication node directly 
connected to many other nodes in a military network is more likely to be attacked by an enemy seeking 
to break down the whole network. Such phenomenon can be described by a general model where each 
node fails with a probability depending on its degree. In this paper, we study such degree-dependent node 
failure problems. Specifically, by analyzing the problem as a degree-dependent site percolation process 
on random geometric graphs, we obtain analytical conditions on percolation in this model. 

In networks which carry load, distribute a resource or aggregate data, such as wireless sensor networks 
and electrical power networks, the failure of one node often results in redistribution of the load from 
the failed node to other nearby nodes. If nodes fail when the load on them exceeds some maximum 
capacity or when the battery energy is depleted, then a cascading failure or avalanche may occur because 
the redistribution of the load causes other nodes to exceed their thresholds and fail, thereby leading to a 
further redistribution of the load. An example of such a cascading failure is the power outage in the western 
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United States in August 1996, which resulted from the spread of a small initial power shutdown in El Paso, 
Texas. The power outage spread through six states as far as Oregon and California, leaving several million 
customers without electronic power [16], [17]. Cascades have also been studied in social networks [18], 
[19]. In wireless sensor networks constrained by battery resource, the system may suffer similar cascading 
failure problems, though the cascading process may be much slower than that for power networks. In this 
paper, we study cascade failures in large-scale wireless networks. To our knowledge, this is the first work 
to address cascading phenomena in networks with geometric constraints. We show that such problems 
can be mapped to a percolation process on random geometric graphs. Using our degree-dependent site 
percolation model, we obtain analytical conditions on the occurrence of a cascading failure. 

This paper is organized as follows. In Section II, we outline some preliminary results for random 
geometric graphs and continuum percolation. In Section III, we first review independent random node 
failures, and then study the general degree-dependent node failures problem. We provide analytical 
conditions for the existence of an infinite component in these models. In Section IV, we show the 
equivalence between cascading failure in large-scale wireless networks and degree-dependent percolation, 
and investigate the conditions under which a small exogenous event can trigger a global cascading failure. 
In Section V, we present simulation results, and finally, we conclude in Section VI. 

II. Random Geometric Graphs and Continuum Percolation 

We use random geometric graphs to model wireless networks. That is, we assume that the network 
nodes are randomly placed over some area or volume, and a communication link exists between two 
(randomly placed) nodes if the distance between them is sufficiently small, so that the received power 
is large enough for successful decoding. A mathematical model for this is as follows. Let || ■ || be the 
Euclidean norm, and /(■) be some probability density function (p.d.f.) on W^. Let Xi,X2,...,X„ be 
independent and identically distributed (i.i.d.) d-dimensional random variables with common density /(■), 
where Xj denotes the random location of node z in M'^. The ensemble of graphs with undirected links 
connecting all those pairs {xi,Xj} with ||xi — Xj|| < r,r > 0, is called a random geometric graph [3], 
denoted by G{Xn,r). The parameter r is called the characteristic radius. 

In the following, we consider random geometric graphs G{Xn, r) in M^, with Xi, X2, X„ distributed 
i.i.d. according to a uniform distribution in the square A = [0, a/xI^- Let A = \A\ be the area of A. In 
this case, ignoring border effects, as n — 00 and y4 ^ 00 with ^ = ^ fixed, G{Xn,r) converges to an 
infinite random geometric graph G{7i\, r) induced by a homogeneous Poisson point process with density 
A > oQ Due to the scaling property of random geometric graphs [2], [3], in the following, we focus on 
G{7ixA). 

'More precisely, this convergence is in distribution since Binomial distribution converges to Poisson distribution. 
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Consider a graph G — {V,E), where V and E denote the set of nodes and Unks, respectively. Given 
u,v &V, we say u and v are adjacent if there exists a Unk between u and v, i.e., (m, v) e E. In this 
case, we also say that u and v are neighbors. 

Let T^A.o = U {0}, i.e., the union of the origin and the infinite homogeneous Poisson point process 
with density A. Note that in a random geometric graph induced by a homogeneous Poisson point process, 
the choice of the origin can be arbitrary. As discussed before, a phase transition takes place at the critical 
density. More formally, we have the following definition: 

Definition 1: For G{Hxfi, 1), the percolation probability Poo(A) is the probability that the component 
containing the origin has an infinite number of nodes of the graph. The critical density Ac is defined as 

Ac = inf{A > : Poo(A) > 0}. (1) 

It is known that if A > Ac, then there exists a unique infinite component in G{H\, 1). A fundamental 
result of continuum percolation states that < Ac < oo [2]. Exact values of Ac and Poo('^) are not yet 
known. Simulation studies show that 1.43 < Ac < 1.44 [20]. 

III. Random Node Failures 

A. Independent Random Node Failures 

As we mentioned in the introduction, the problem of network resilience to random node failures can be 
described by a percolation process on the graph modelling the network. Suppose the network modelled 
by G{7i\^ 1) is subject to random node failures where each node fails, along with all associated links, 
with probability q, independently of other nodes. When q stays below a certain threshold qc, there still 
exists a connected component of operational nodes that spans the entire network. When q > q^ the 
network disintegrates into smaller, disconnected operational parts. Since each node fails randomly and 
independently with probability q, according to Thinning Theorem [2], [3], the remaining graph is still a 
random geometric graph with density (1 — q)X. Thus, given A > Ac, the remaining graph is percolated if 
(1 — g)A > Ac, and not percolated if (1 — g) A < Ac. Therefore, we have 

qc^i = 1 - — , (2) 

H A 

where Hc il^c — ^c^^) and ji are the critical mean degree and the mean degree of G{'H\, 1), respectively. 

B. Degree-Dependent Node Failures 

We have thus far considered wireless network resilience to independent random node failures. As we 
mentioned before, in practical wireless networks, it is often the case that the failure probability of a 
node depends on its degree. We therefore study network resilience in the face of degree-dependent node 



SUBMITTED TO IEEE TRANSACTIONS ON INFORMATION THEORY 



5 



failures. Let the original random geometric graph be G{T-Cx, 1) with density A > Ac. Suppose each node 
with degree k in GCHxA) ^siih, along with all associated links, with probability q{k),0 < q{k) < 1. 
Denote the remaining graph consisting of operational nodes and associated links by G{'Hx, l,q{ )). We 
say G{'H\, !,(/(■)) is percolated if there exists an infinite component in G{H\, 1, g(-)). 

Note that in wireless networks, a node with more neighbors (higher degree k) may suffer from more 
interference. If we take the failure probability q{k) to be increasing in k, then the effects of interference 
can be captured by our failure model. 

To study the percolation-based connectivity of G{Hx,l,q{-)), we consider a degree-dependent site 
percolation process for random geometric graphs. Similar problems have been studied in the context of 
Erdos-Renyi random graphs and random graphs with given degree distributions using generating function 
methods [19], [21]-[23]. Due to clustering effects and geometric constraints, however, generating function 
methods are not applicable for random geometric graphs. The SINR-based percolation model for wireless 
networks studied in [11], [12] involve dependent percolation but not degree-dependent percolation. In [24], 
a degree-dependent site percolation model is studied. There, the authors propose a topology control 
mechanism for sensor networks where each sensor stays active for a | fraction of the time, where is a 
constant and k > (p. The authors obtain a sufficient condition for the existence of an infinite component 
within this model. A more general model is studied in [13]. As in [24], the authors in [13] obtain only 
a sufficient condition for the existence of an infinite component. In this paper, in addition to a sufficient 
condition, a necessary condition for the existence of an infinite component is found for our model. The 
main results are as follows. 

Theorem 1: (i) For any fii > jic and G{H\., 1) with fj, > jii, there exists k^ < oo which depends on ji, 
such that if 

q{k) < 1 - — , for all 1 < A; < fco, (3) 
A* 

then with probability 1, there exists an infinite connected component in G{Hx, 1, ?( )); 
(ii) Given G(Hx, 1) with A > Ac, if either 

-j^- .v- ' - 27 



k=l 

when q{k) is non-decreasing in k, or if 

(I)' 



^ A;! ^ m! v '^v ^ ^ 27 

k=l m=0 



(5) 



when q{k) is non-increasing in k, then with probability 1, there is no infinite connected component in 

G{nx,l,q{-)). 
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An interesting implication of Theorem [I]-(i) is that even if all nodes with degree larger than fail with 
probability 1, an infinite component still exists in the remaining graph as long as ([3]) is satisfied. 

Note that although ([3]) resembles the percolation condition for independent node failures, Theorem [T] 
is far from a straightforward generalization of the result for independent failures. Indeed, in the degree- 
dependent model, for general q{k), the spatial distribution of the operational nodes (or failed nodes) is 
no longer homogeneous Poisson or even nonhomogeneous Poisson. Nevertheless, if the resulting point 
process dominates the Poisson point process with critical density in the sense that 



for every area A C M^, where Ac is the critical density of the Poisson point process and A(x) is the density 
function of the point process resulting from the degree-dependent failure modelj^ then using Strassen's 
Theorem [25], we can couple the two point processes to show that the resulting graph is always percolated. 
Given the general form of q{k), however, computing the density function of the resulting point process 
is difficult. 

To tackle this problem, we use a renormalization argument that employs a mapping between the 
continuum model and a discrete percolation model. A similar technique was used in [10], [12]. Using 
the fact that this mapping is one to one, we can bound the density of the point process resulting from 
the degree-dependent failure model, and then resort to coupling methods. In particular, we will couple 
G(Hx, with another random failure model which is percolated. We will show that when ([3]) is 

satisfied, there exists A;o < c>o such that all the operational nodes having degree less than or equal to ko in 
the random failure model are operational in G{'Hx, l,g(-)), and these operational nodes form an infinite 
component in G{H\, 1, q{-)). 

Proof of Theorem\l\(i): To prove Theorem [il-(i), consider a square lattice C = d - 1?, where d is the 
edge length. The vertices of C are located at {d x i, d x j) where (z,j) G 7?. For each horizontal edge 
a, let the two end vertices be {dx ax,d x ay) and (d x Ux + d, d x ay). 

Now consider a random failure model in G{Hx, 1) where each node fails (with all associated links) 
independently with probability 1 — — . Let GATix, 1) be the remaining graph. By the Thinning Theorem, 
Gi{Hx, 1) is a random geometric graph with density Ai = ^ > Ac. Consequently, Gi{Hx, 1) is in the 
supercritical regime. 

Define event Aa{d) for edge a in £ as the set of outcomes for which the following condition is satisfied: 

^Precisely, given the point process resulting from the degree-dependent failure model, A(x) = lim^^o Pr(3 one node G A{x,S)), where 
^(x, S) is the circular region centered at x with radius 5. 
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(a) Good Rectangle (b) Complete Rectangle 

Fig. 1. Examples of good and complete rectangles (edges) 

the rectangle Ra = [a^d — j, axd + ^] x [ayd — |, ayd + j] is crossecj^ from left to right by a connected 
component in GiiHx, 1). If Aa{d) occurs, we say that rectangle Ra is a good rectangle, and edge a is a 
good edge. Let 

Pg{d) ^ Ft{AM)- 

Define Aa{d) similarly for all vertical edges by rotating the rectangle by 90°. An example of a good 
rectangle and a good edge is illustrated in Figure [U- (a). 

Further define event Ba{d) for edge a in £ as the set of outcomes for which both of the following 
occur: 

(i) Aa{d) occurs; 

(ii) The left square 5*^; = [a^d — |, a^d + |] x [ayd — |, ayd + |] and the right square = [a^d + 

dxd + ^] X [ayd — |, ayd + |] are both crossed from top to bottom by connected components in 

If Ba{d) occurs, we say that rectangle Ra is a complete rectangle, and edge a is a complete edge. Let 

pM)='P<Ba{d)). 

Define Ba{d) similarly for all vertical edges by rotating the rectangle by 90°. An example of a complete 
rectangle and a complete edge is illustrated in Figure [I]-(b). 

Note that the events {Ba{d)} are not independent in general. However, if two edges a and h are not 
adjacent, i.e., they do not share any common end vertices, then Ba{d) and Bi,{d) are independent. 

As illustrated in Figure [2l edges h and c are vertically adjacent to edge a. It is clear that when events 
Aa{d), Ai,{d) and Ac{d) occur, event Ba{d) occurs. Moreover, since events Aa{d), Ai){d) and Ac{d) are 

^Here, a rectangle R — [x\,X2\ x [j/i, j/2] being crossed from left to right by a connected component in GiiTix, 1) means that there 
exists a sequence of nodes v\,V2, ■■■,Vm G GiiTix,!) contained in R, with ||x„. — x„;^j|| < l,i = l,...,m— 1, and < x{v\) — xi < 
1,0 < 2:2 — x{vm) < 1, where x{vi) and x{vm) are the a;-coordinates of nodes vi and Vm, respectively. A rectangle being crossed from 
top to bottom is defined analogously. 



SUBMITTED TO IEEE TRANSACTIONS ON INFORMATION THEORY 



8 




Fig. 2. Events Aa{d), and Ac{d) imply event Ba{d). 

increasing eventci according to the Fortuin-Kasteleyn-Ginibre (FKG) inequality [2]-[4], 

> Ft{AM) n A,{d) n A,{d)) 

> Pr(A,((i))Pr(A(d))Pr(A,(rf)) 

According to Corollary 4.1 in [2], the probability Pg{d) converges to 1 as d ^ oo when Gi{H\, 1) is 
in the supercritical phase. In this case, {pg{d)Y converges to 1 as d ^ oo as well. Hence, Pc{d) converges 
to 1 as ^ oo when Gi{Hx, 1) is in the supercritical phase. 

Now, define 



diX) ^ inf <^ d > 4 : p^{d) 



>l-qo 



(6) 



(f + 2) (f + 2)A 

where go — Now choose the edge length of C as d = d(\). We further define complete events 

{B'^{d)} with respect to ^(TYa) 1, the same way as we defined complete events {Ba{d)} with 

respect to Gi{H\, 1). 

Define event Ca{d) for each horizontal edge a in £ as the set of outcomes for which the following 
condition is satisfied: The number of nodes of G{Hx, 1) in R'^ is strictly less than 



(7) 



2 ' ; V 2 

where R'^ = [a,d{X) - ^ - 1, a^d + '-^ + 1] x [a,d(A) - ^ - l,ayd{\) + ^ + 1], i.e., < is 
the rectangle Ra extended by 1 in all directions. Rectangle R'^ is shown in Figure [3l Note that \R'J = 
(^ + 2) (^ + 2). 

''An event A is called increasing if Ia{G) < Ia{G') whenever graph G is a subgraph of G' , where Ia is the indicator function of A. 
An event A is called decreasing if A'^ is increasing. For details, please see [2]-[4]. 
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Fig. 3. Rectangle Ft!^ is the rectangle Ra extended by 1 in all directions. 

Define Ca{d) similarly for all vertical edges by rotating the rectangle by 90°. If Ca{d) occurs, we call 
rectangle Ra and edge a efficient. Let 

Pe(rf)=Pr(a(d)). 

Note that the events {Ca{d)} are not independent in general due to potential overlaps. However, if d > 4 
and two edges a and h are not adjacent, i.e., they do not share any common end vertices, then Ca{d) and 
Ch{d) are independent. 

We say an edge a in £ is open if and only if it is both complete and efficient, i.e., when events Ba{d) 
and Ca{d) both occur, and closed otherwise. 

When Ca{d) occurs for edge a in C, no node of G(H\, Ra has degree strictly greater than 

ko in GiHx, 1). In addition, if q(k) satisfies ([3]), a node in GiHx, 1) with degree k, 1 < k < ko, survives 
with a probability greater than or equal to ^ in the degree-dependent failures model. On the other hand, 
for the independent random failures model, a node in G{Hx, 1) survives with probability exactly equal to 
Thus we can couple GCHx, 1, q{-)) with Gi(Hx, 1) so that the existence of crossings defined in events 
{Ba{d)} for GiiHx, 1) implies the existence of crossings defined in events {B'^(d)} for G{7ix, 
Hence, if edge a of £ is open, there exists at least one left-to-right crossing and two top-to-bottom 
crossings in Ra in G{Hx, Therefore, a path of open edges in C implies a connected component 

in G{Hx-, l,q{-)). This is illustrated in Figure IH 

Although events Ba{d) and Ca{d) are not independent, we have 

Po{d) ^ PT{Ba{d)nGa{d)) 

= FriBaid)) + Pr(a(rf)) - Pr(S,(ti) U Caid)) 

> p,{d) + peid) - I. (8) 
Let be the number of nodes of GiHx, 1) in i?^. Then N has a Poisson distribution with mean 
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Fig. 4. A path of open edges in L implies a path of connected component in GiTix, !,<?(■)) 



Note that = 2E[N]. By Chebychev's inequality, we have 

p,{d) = PT{N<ko) 

= 1 - Pr(iV > ko) 

= l-Pr(iV>2^[A^]) 
^ Var(iV) 

1 

= 1 - ^4 (9) 

(^ + 2) [^ + 2)X 

By dS]) and ©, we have 

Po{d) > Pc{d) + pe{d) - 1 > 1 - go- (10) 

Now consider the dual lattice C of C The construction of C is as follows: let each vertex of C be 
located at the center of a square of C Let each edge of C be open if and only if it crosses an open edge 
of C, and closed otherwise. It is clear that each edge in C is open also with probability Po{d). Let 

q = l -Poid), 

and choose 2m edges in C. Because the states (i.e., open or closed) of any set of non-adjacent edges are 
independent, we can choose m edges among these 2m edges such that their states are independent. As a 
result, 

Pr(All the 2m edges are closed) < q"^. 

Now a key observation is that if the origin belongs to an infinite open edge cluster in C, for which 
the event is denoted by Ec, then there cannot exist a closed circuit (a circuit consisting of closed edges) 
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Fig. 5. If the origin belongs to an infinite open edge cluster in C, then there cannot exist a closed circuit surrounding the origin in C' , and 
vice versa. 



surrounding the origin in C , for which the event is denoted by Ea, and vice versa. This is demonstrated 
in Figure [51 Hence 

Vi{Ec) > Pr(^£') < 1. 

Furthermore, we have 

oo oo 

Fr{Ec') = J]Pr(3Cc(2m)) < ^^7(2771)^"^, 

m=2 m=2 

where Oc{2m) is a closed circuit having length 2m surrounding the origin, and 7(2m) is the number of 
such circuits. 

By Lemma |3] in Appendix A, we have 



5^7(2m)g- < $^-(m-l)(9g) 



m=2 



m=2 
4 

27 
4 

27 



^m(9gr-^(9gr 



m=2 



2{9qf - (9g)3 (9g) 



m=2 
3 fn..\2 



;i - 9qy 



l-9q 



12g2 



Because 



(l-9g)2' 

q = l -po{d) <qo = 



(11) 



9 + 2V3' 

we have < 1^ and hence ^-^"'^^g^^ < 1. Thus the origin belongs to an infinite open edge cluster in C 
with a positive probability. The existence of an infinite open edge cluster in C implies the existence of 
an infinite connected component in G{l-L\, 1, q{-)), and this completes our proof for Theorem [T]-(i). □ 
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(a) 



(b) 



(c) 



Fig. 6. Examples of open edges: in (a) and (b), Sa, Sb and Sc. are open, while in (c), Sa, Si,, Sc and Sd are all open. 



The first part of Theorem [T] provides a sufficient condition for G{T-lx,l, q{-)) to have an infinite 
component. The second part of Theorem [T] provides a sufficient condition for G(Hx,1,q{-)) to have 
no infinite component. Thus, it provides a necessary condition for GCHx,!, q{-)) to have an infinite 
component. To show this, we use another mapping between the continuum model and a discrete percolation 
model. 

Proof of Theorem\l}-(ii): Map G{Hx, 1) to a square lattice C with edge length d = Let the square 
centered at vertex a with edge length d be Sa- Let N(Sa) and N'{Sa) be the number of nodes of G(Hx, 1) 
and GCHx,!, q{-)) in Sa, respectively. We say Sa is open if and only if either one of the following 
conditions holds: 

(i) N'iSa) > 1; 

(ii) There is a link of GiHxAiQi )) crossing Sa which directly connects two nodes of GCHxAj li )) 
outside Sa- 
in Figure |6l we illustrate the possible examples of open squares in C. If Sa is open only because Sa 
satisfies condition (ii), we say it is type-2 open; otherwise, we say it is type-1 open. 

The probability that Sa is type-1 open can be expressed as 

Pl = Vl{N\Sa)>l) 

oo 

= Y.^l{N{Sa) = KN'{Sa)>l) 



k=l 

oo 



^Pr(iV(5J = k) PT{N'{Sa) > l\N{Sa) = k). 



(12) 



k=l 

When q{k) is non-decreasing in A;, by Appendix B, 



k=l 



(13) 
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Fig. 7. An open path in lattice C 



If dll) holds, we have pi < ^. When q{k) is non-increasing in k, by Appendix C, 



(14) 



k=l m=0 

If (|5]) holds, we have pi < ^ as well. Therefore, in both cases, we have pi < ^. 

If there is an infinite component in G^Hx, 1, q{-)), there must exist an infinite path consisting of nodes 
in G(Hx, 1, ?(■))• Furthermore, this infinite path must pass through an infinite number of open squares in 
C, as illustrated in Figure |71 This is because along the infinite path in GiHx, l,q{-)), each square of C 
contains at least one node of GiHx, 1, q{-)) or is crossed by a link of GCHx, 1, that directly connects 
two nodes of G{Hx-, outside Sa- 

Now choose a path in C starting from the origirjfl having length 3m. From Figure [6l we can see that a 
link from any given node in G(Hx, 1, (?(■)) can go through at most three open squares in addition to the 
open square containing the given node. As a result, along the path, among every three consecutive open 
squares, there exists at least one type-1 open square. Thus, we have 



Pr(All the 3m edges are open) < 



m+l 



Now 



Pr(3C>p(3m)) < ^(3m)p^ 



m+l 



(15) 



(16) 



where Op (3m) is an open path in C starting from the origin with length 3m, and ^(3m) is the number 
of such paths. For a path in C from the origin, the first edge has four choices for its direction, and all 
other edges have at most three choices for their directions. Therefore, we have 



^(3m) < 4 ■ 3 



3m— 1 



(17) 



^Note that the choice of the origin is arbitrary. 
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Fig. 8. Critical value of (j) obtained by condition J21l ( 

and 

Pr(3C»p(3m)) < 4 ■ 33"^-ip^+i = i;)i(3V)™- (18) 

When pi < ^, the RHS of (fTSl ) converges to as m — »• oo. This implies that with probability 1, there is 
no infinite path starting from the origin (which is arbitrary) in C. Therefore, with probability 1, there is 
no infinite component in GCHx, 1, ?(■)) either. □ 



As an example of degree-dependent failures one may consider a strategy where an attacker sets a 
threshold and destroys all nodes having degree strictly greater than 0. Given G{Hx, 1) and an integer 
0, all nodes with degree strictly greater than and their associated links fail, and all other nodes remain 
operational. That is 

Let the remaining graph be denoted by GiHx, 1, 0). By directly applying Theorem [T]-(i), we know that 
there exists ki < oo, such that when > ki, G{Hx, 1, 0) is percolated. 

We can also apply Theorem [T]-(ii) to obtain a lower bound on the critical value of 0. By substituting (fT9l ) 
into (HI), we see that if 0' satisfies 

then for any < 0', GiHx, 1,0) is not percolated. Condition (|20l) can be simplified as 

fc=0 

For any given A, we can use (t2TI) to find the critical value of 0. Figure [8] plots the maximal 0' against A 
satisfying (|2TI) . 
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IV. Cascading Node Failures 

As we pointed out before, in networks which carry load, distribute a resource or aggregate data, such 
as wireless sensor networks and electrical power networks, the failure of one node often results in the 
redistribution of the load from the failed node to other nearby nodes. If nodes fail when the load on them 
exceeds some maximum capacity or when the battery energy is depleted, then a cascading failure or 
avalanche may occur because the redistribution of the load causes other nodes to exceed their thresholds 
and fail, thereby leading to a further redistribution of the load. 

Cascades have been used in social networks to model phenomena such as epidemic spreading, belief 
propagation, etc. Although they are generated by different mechanisms, cascades in social and economic 
systems are similar to a cascading failure in physical infrastructure networks [16], [17] in that initial 
failures can increase the likelihood of subsequent failures, leading to eventual dramatic global outages. 
Usually, such cascading failures are extremely difficult to predict, even when the properties of individual 
components are well understood. In [18], [19], the author investigate such cascading failures in social 
networks by modelling the problem as a binary decision percolation process on random networks where 
the links between distinct pairs of nodes are independent. 

In contrast to previous work, we study cascading failures in large-scale wireless networks modelled by 
random geometric graphs. To our knowledge, this is the first investigation of cascading phenomena in 
networks with geometric constraints. In particular, we consider the following model. Consider a network 
modelled by a random geometric graph G{l-L\,l) with A > Ac, where an initial failure seed is represented 
by a single failed node. This initial failure seed is an exogenous event (shock) that is very small relative 
to the whole network. We are interested in whether this initial small shock can lead to a global cascade 
of failures, which is technically defined as follows. 

Note that in characterizing cascading failure, the essential point is to assess whether the network has 
been affected in a global manner, rather than in an isolated local manner. For this reason, cascades cannot 
be easily characterized by, for instance, what percentage of the network nodes have failed. Instead, after 
some thought, one is led to the conclusion that percolation (the existence of an infinite failed component) is 
an appropriate notion with which to characterize cascading failures. Thus, we have the following definition. 

Definition 2: A cascading failure is an ordered sequence of node failures triggered by an initial failure 
seed resulting in an infinite component of failed nodes in the network. 

To describe cascading failures, we use the following simple but descriptive model. We assume that due 
to redistribution of the load, each node i fails if a given fraction of its neighbors have failed, where the 
^i's are i.i.d. random variables with probability density function /(^). The order of the failure sequence 
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a b a b a b 




(d) (e) (f) 

Fig. 9. An example of cascading failures (solid nodes are operational and empty circles are failed) 

is then the topological order determined by the location of the initial failure and the threshold of each 
node i. 

Unlike the degree-dependent scenarios studied earlier, cascading failure processes exhibit dynamic 
evolution. This is illustrated in Figure |9l The simple network in Figure |9l-(a) has nine nodes: a, b, with 
failure thresholds i/ja = 0.8, ipb = 0.7, V'c = 0.1, = 0.3, = 0.4, ^/^/ = 0.5,ijg = 0.2,^/, = 0.6, = 
0.9. At the beginning, as shown in Figure |9l-(b), an initial failure occurs at node /. Then, since tpc = 0.1 
and one of c's three neighbors has failed, node c fails. Similarly, node g also fails. This is illustrated in 
Figure |9l-(c). Since V'd = 0.3, d does not fail until two of its five neighbors have failed (Figure [9l-(d)). 
This process continues (Figure |9l-(e)) until no further failures can occur in the network (Figure |9l-(f)). 
The resulting network is denoted by GiHx, which, in this example, has failed nodes a, b, ...,g, and 
operational nodes h and i. The ordered sequence of failures in this example is /, {c, g}, d, {b, e}, a. 

For two adjacent nodes u and v, we say that node u's failure is caused by node v's failure if and only 
if node m's failure immediately follows node f 's failure in the ordered failure sequence. In the example 
of Figure HI node c's failure is caused by node /'s failure, and node d's failure is caused by node c's 
failure. 

Now observe that the initial failure can grow only when some neighbor, say j, of the initial failure 
seed has a threshold satisfying ipj < where kj > 1 is the degree of j. We call such a node vulnerable. 
The probability of a node being vulnerable is 

Pk = F^(^^^ = £ f{i;)dij, (22) 
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where -F^(-) is the cumulative distribution function of In the example of Figure [9l nodes c, e and g 
are vulnerable. 

When the initial failure seed is directly connected to a component of vulnerable nodes, all nodes in this 
component fail. The extent of the failure, and hence the resilience of the network, depends not only on 
the number of vulnerable nodes, but also on how they are connected to one another. In the context of this 
model, a cascade of failed nodes forms when the network has an infinite component of vulnerable nodes 
and the initial failure seed is either inside this component or adjacent to some node in this component. 

On the other hand, if node i has a threshold satisfying ipi > where ki is the degree of i, then node 
i will not fail as long as at least one neighbor is operational. We call such a node reliable. Otherwise, if 

< ^aT^' node i unreliable. For k>l, the probability of a node being reliable is given by 



For = 0, we set = 1. Intuitively, a node i with no neighbors should be reliable, since it remains 
operational no matter what is, unless node i itself is the initial failure. This also agrees with (l23l) by 
applying the convention F(— oo) = 0. In the example of Figure |9l nodes a, h and i are reliable, and all 
the other nodes are unreliable. Note that when two reliable nodes are adjacent and neither is an initial 
failure seed, no matter what else happens in the network, they remain operational. This is illustrated by 
nodes h and i in Figure [9l When a reliable node u has only unreliable neighbors, node u fails if and 
only if all its unreliable neighbors fail, unless node u is the initial failure. We call such a reliable node 
an isolated reliable node. 

The following theorem presents our main results on cascading failures in wireless networks. It provides 
a sufficient condition for the existence of an infinite component of vulnerable nodes, as well as a sufficient 
condition for the non-existence of an infinite component of unreliable nodes. The theorem asserts that 
when there exists an infinite component of vulnerable nodes and the initial failure is either inside this 
component or adjacent to some node in this component, then there is a cascading failure in GCHx, 1). 
On the other hand, when there is no infinite component of unreliable nodes, then there is no cascading 
failure no matter where the initial failure is. 

Theorem 2: (i) For any fii > fic and G{7i\, 1) with > /ii, there exists < oo depending on ji such 
that if 



then with probability 1, there exists an infinite component of vulnerable nodes in G{l-i\,\). Moreover, 
if the initial failure is inside this component or adjacent to some node in this component, then with 
probability 1, there is a cascading failure in GCHx, 1). 




(23) 




(24) 
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(ii) For any G(Hx, 1) with /i > /ic, if 
fc! ^ m! 

fc=l m=0 

where F^(— oo) = by convention, then with probability 1, there is no infinite component of unreliable 
nodes. As a consequence, with probability 1, there is no cascading failure in GCHx, 1) no matter where 
the initial failure is. 

Proof: To prove (i), we view the problem as a degree-dependent node failure problem where a vulnerable 
node is considered "operational" and a non-vulnerable node is considered a "failure." In this model, each 
node with degree k fails with a probability 1 — pk- Then, by applying Theorem [T]-(i) directly, we have for 
any /ii > /i^ and GiHx, 1) with fi > /ii, there exists < oo such that if 

= ^* (^) - 7- 

then with probability 1, there exists an infinite component of vulnerable nodes in G(Hx, 1). If the initial 
failure is inside this component or adjacent to some node in this component, then there is a cascading 
failure in G{Hx, !)• 

To prove (ii), we first show (a): if (l25l) holds, then with probability 1, there is no infinite component 
of unreliable nodes. We then show (b): if there is no infinite component of unreliable nodes, then with 
probability 1, there is no cascading failure no matter where the initial failure is. 

To show (a), we apply the result of Theorem [Tl-(ii). Regard an unreliable node as "operational" and a 
reliable node as a "failure". Then, ak — the probability of a node with degree k being reliable — becomes 
the failure probability q(k) in the context of Theorem [I]-(ii)- Since is non-increasing in k, we replace 
q{m + k - 1) in © with a^+k-i = l-F^ i Z+k-i ) ^^^^ o^^^^^^ CS]). By Theorem [I]-(ii), when ^ holds, 
with probability 1, there is no infinite component of unreliable nodes in the network. 

In order to show (b), we will show that if there is a cascading failure, i.e., there is an infinite component 
W of failed nodes, there must exist an infinite component of unreliable nodes in the network. Assume 
the initial failure takes place at node u, and consider two cases: (1) node u is an unreliable node or an 
isolated reliable node; (2) node u is a non-isolated reliable node. 

For case (1), if there is an infinite component of failed nodes in the network, all the failed nodes are 
either unreliable or isolated reliable. This is because non-isolated reliable nodes do not fail no matter 
what happens in the network. Furthermore, except for the initial failure, an isolated reliable node fails if 
and only if all its (unreliable) neighbors fail. This implies that except for the initial failure, the failure of 
any isolated reliable node does not cause any other failures. In other words, except for the initial failure, 
the failure of any unreliable node is caused by the failure(s) of other unreliable node(s). Thus, all the 
unreliable nodes in W belong to the same component. 



1 - 



m + k ~ 2 
m + k — 1 



< 



27' 



(25) 
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Fig. 10. For any node i, the number of its isolated reliable neighbors cannot be strictly greater than 6. This is because any two nodes j 
and k inside one of six fan-shaped regions are adjacent to each other. Thus, nodes j and k cannot be isolated reliable by definition. By the 
same argument, when i is the initial failure, the number of induced isolated reliable nodes cannot be strictly greater than 6. 

Now suppose there is only a finite number of unreliable nodes in W . Then there must be an infinite 
number of isolated reliable nodes in W . Note first that an isolated reliable node cannot be adjacent to 
another isolated reliable node by definition. Furthermore, as illustrated in Figure [TOl each unreliable node 
cannot have strictly more than 6 isolated reliable neighbors. Therefore, it is impossible to have a finite 
number of unreliable nodes but an infinite number of isolated reliable nodes in W . This contradiction 
ensures that the component of unreliable nodes in W is infinite. 

For case (2), a non-isolated reliable node fails if and only if (i) it is adjacent to the initial failure, (ii) 
not adjacent to any other reliable nodes, and (iii) all of its unreliable neighbors fail. We call a non-isolated 
reliable node satisfying condition (i)-(ii) an induced isolated reliable node. As illustrated in Figure [TOl the 
number of induced isolated reliable nodes cannot be strictly greater than 6. Except for the initial failure 
and a finite number of induced isolated reliable nodes, all other failed nodes in W are either isolated 
reliable or unreliable. Observe that as in the failure of an isolated reliable node, the failure of an induced 
isolated reliable node does not cause any other failures. In other words, except for the initial failure, 
the failure of any unreliable node is caused by the failure(s) of other unreliable node(s). Thus, all the 
unreliable nodes in W belong to the same component. Then by the same argument for the first case, there 
must exist an infinite component of unreliable nodes in W . □ 



V. Simulation Studies 

We illustrate degree-dependent node failures with two examples in Figure [TTl The original network 
has n = 1600 nodes uniformly distributed in [0,25]^, and mean degree ^ = 8.04. In Figure [TTl- (a). 
q(k) = max{0, 1 — ^ — j}. This function satisfies condition ([3]) and the remaining network of operational 
nodes still has a large connected component spanning almost the whole network, where empty circles 
represent failed nodes. In Figure [II]-(b), q{k) = 0,k < A, and q{k) = l,k > A. This function satisfies 
condition @) and the remaining network of operational nodes consists of small isolated components. 
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(a) q{k) — max{0, solid: operational nodes, 

empty: failed nodes 



(b) g(fc) = 0,fc < 4, and q{k) = > 4; solid: 
operational nodes, empty: failed nodes 



Fig. 11. Degree-dependent node failures in G{Ti.\, 1) with fi — 8. 

In Figure [l2l we illustrate cascading failures. Figure [T2l-(a) depicts a wireless network with n = 1600 
nodes uniformly distributed in [0, 15]^, and mean degree fi = 19.64. Each node i has a probability density 
function /{ipi) for the threshold V'j, where f (ipi) = ^ ^or < < 0.1, and /{ipi) = ^ for 0.1 < ipi < 1. 
The ipi's are assumed to be i.i.d. Figure H^fb) depicts the largest component of vulnerable nodes (which 
are represented by empty circles) spanning the network. Figure [T2l-(c) indicates an initial failure caused by 
exogenous event, which is represented by a black solid node pointed to by an arrow. From Figure [T2l-(d). 
we see that the resulting network suffers from a cascading failure, where the failed nodes are represented 
by empty circles. 

Figure [13] illustrates an example where no cascading failure occurs. The network is the same as the 
one shown in Figure [T2l-(a). Here, each node i has a probability density function f{tpi) for the threshold 
tpi, where fii/ji) = ^ for < tpi < 0.999, and f{^i) = 999 for 0.999 < i^i < 1. The ^^'s are assumed to 
be i.i.d. This function satisfies the condition (l25l) . Figure [T3l-(a) shows that there is no large component 
of unreliable nodes (which are represented by empty circles) spanning the network. After the same initial 
failure as shown in Figure [T2l-(c) takes place, we see from Figure [T3l(b) that the initial failure cause 
no other failures (failed nodes are represented by empty circles), and no cascading failure occurs in the 
network. 



In this paper, we studied network resilience problems from a percolation-based perspective. To analyze 
realistic situations where the failure probability of a node depends on its degree, we introduced the degree- 
dependent failures problem. We model this phenomenon as a degree-dependent site percolation process 
on random geometric graphs. Due to its non-Poisson structure, degree-dependent site percolation is far 



VI. Conclusion 



SUBMITTED TO IEEE TRANSACTIONS ON INFORMATION THEORY 



21 





(a) original network 



(b) large component of vulnerable nodes; solid: non- 
vulnerable nodes, empty: vulnerable nodes 




O O DO 



(c) initial failure pointed to by arrow 



Fig. 12. Cascading failure 
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(d) cascading failure; solid: operational nodes, empty: 
failed nodes 
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(a) no large component of unreliable nodes; solid: reli- 
able nodes, empty: unreliable nodes 

Fig. 13. No cascading failure 



(b) no cascading failure; solid: operation nodes, empty: 
failed nodes 



from a trivial generalization of independent site percolation. Using coupling methods and renormalization 
arguments, we obtained analytical conditions for the occurrence of phase transitions within this model. 
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Fig. 14. An example of a circuit surrounding the origin in lattice £' 



Furthermore, in networks carrying traffic load, sucli as wireless sensor networks and electrical power 
networks, the failure of one node can result in redistribution of the load onto other nearby nodes. If 
these nodes fail due to excessive load, then this process can result in cascading failures. We analyzed 
this cascading failure problem in large-scale wireless networks, and showed that it is equivalent to a 
degree-dependent percolation process on random geometric graphs. We obtained analytical conditions 
for the occurrence and non-occurrence of cascading failures, respectively. To our knowledge, this work 
represents the first investigation of cascading phenomena in networks with geometric constraints. 

Appendix A 

The following lemma is similar to the one used in [4], [10], [12]. For completeness, we provide the 
proof here. 

Lemma 3: Given a square lattice suppose that the origin is located at the center of one square. Let 
the number of circuit^ surrounding the origin with length 2m be 7 (2m), where m > 2 is an integer, then 



we have 



7(2m)<^(m-l)32-. (27) 



Proof: In Figure [141 an example of a circuit that surrounds the origin is illustrated. First note that the 
length of such a circuit must be even. This is because there is a one-to-one correspondence between each 
pair of edges above and below the line y = 0, and similarly for each pair of edges at the left and right of the 
line X = 0. Furthermore, the rightmost edge can be chosen only from the lines U : 

Hence the number of possibilities for this edge is at most m — 1. Because this edge is the rightmost edge, 
each of the two edges adjacent to it has two choices for its direction. For all the other edges, each one 
has at most three choices for its direction. Therefore the number of total choices for all the other edges 

'a circuit in a lattice £' is a closed path with no repeated vertices in £'. 
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is at most 3^™ ^ . Consequently, the number of circuits that surround the origin and have length 2m must 
be less or equal to (m — 1)2^3^'""^, and hence we have (|27l) . □ 

Appendix B 
By (fT2)) . the probability pi can be written as 

oo 

Pi = Y,^i{N{Sa) = k)Vi{N'{Sa)>l\N{Sa) = k) 

k=l 

oo 



J2P<N{Sa) = k)[l- PT{N'{Sa) = 0\N{Sa) = k)] 



k=l 

oo / \ \k 



= 5^i||-e-^[l-Pr(/i = l,...,4 = l|iV(5J = fc)] (28) 

k=l 

where Jj is the indicator random variable indicating the failure of the i-th node. Because q{k) is non- 
decreasing in k, the event {li = l\N(Sa) = k} is an increasing event. Hence, according to the FKG 
inequality, 

Pr(/i = = l\N{Sa) = k)> [Pr(/, = l\N{Sa) = k)]K (29) 

Since d = all the nodes of G{l-L\, 1) in Sa are adjacent to each other. Hence if there are k nodes in 
Sa, every node of GiHx, 1) in Sa has degree greater than or equal to A; — 1. In addition, since q(k) is 
non-decreasing in k, we have 

FT{h = l\N{Sa) = k)>q{k-l). (30) 

By (|28l)-(|30l). we have 

oo / \\k 



k=l 



oo /x\k 

1 - e"^ - 5^ i|i_e-tg(A; - 1)^ (31) 

k=l 

Appendix C 

Let Ta be the shaded area shown in Figure [151 Then \Ta\ = 2^/2 + tt. Let N{Ta) be the number of 
nodes of G{Hx,l) in T^. Since Sa and Ta do not overlap, N{Sa) and N{Ta) are independent. By (fT2l) . 
we can write pi as 

oo oo 

p, = Y,MNiSa) = k)Y,P^iN{Ta)=m)PT{N'{Sa)>l\N{Sa) = k,N{Ta) = m) 

k=l m=0 
oo oo 

= Yl = ^) E =m)[l- FT{N'{Sa) = 0\N{Sa) = k, N{Ta) = m)] 

k=l m=0 
oo / \\k oo 

= J]-^e-t^Pr(iV(r,) = m)[l-Pr(/i = l,...,4 = l|iV(,SJ=A;,iV(T,)=m)], (32) 

k=l ' m=0 
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Fig. 15. r„ and Sa 

where /j is the indicator random variable indicating the failure of the i-th node. Because g(A;) is non- 
increasing in A;, the event {/j = l|A^(S'a) = k,N{Ta) = m} is a decreasing event. Hence, according to 
the FKG inequality, 

Pr(/i = 1, 4 = l\N{S,) = k, N{Ta) =m)> [Pr(/, = l\N{Sa) = k, N{Ta) = m)]^ (33) 

For any node u inside Sa, all of u's neighbors are within U Sa- Given N(Sa) = k and N{Ta) = m, 
any node u inside Sa has degree less than or equal to m + k — l.ln addition, since q{k) is non-increasing 
in k, we have 

Pr(/, = l\N{Sa) = k, N{Ta) = m) > q{m + k - 1). (34) 



By (|32|)-(|34|). we have 



k=l ' m=0 



k=l 



FT{N{Ta) = m){l-q{m + k- 1)'=) 

{1 - q{m + k - 1)'') . 



m=0 



References 



(35) 



[1] E. N. Gilbert, "Random plane networks," J. Soc. Indiist. Appl. Math., vol. 9, pp. 533-543, 1961. 
[2] R. Meester and R. Roy, Continuum Percolation. New York: Cambridge University Press, 1996. 
[3] M. Penrose, Random Geometric Graphs. New York: Oxford University Press, 2003. 
[4] G. Grimmett, Percolation. New York: Springer, second ed., 1999. 

[5] B. Bollobas and O. Riordan, Percolation. New York: Cambridge University Press, 2006. 

[6] P. Gupta and P. R. Kumar, "Critical power for asymptotic connectivity in wireless networks," in Stochastic Analysis, Control, 

Optimization and Applications: A Volume in Honor of W. H. Fleming, pp. 547-566, 1998. 
[7] L. Booth, J. Bruck, M. Franceschetti, and R. Meester, "Covering algorithms, continuum percolation and the geometry of wireless 

networks," Annals of Applied Probability, vol. 13, pp. 722-741, May 2003. 
[8] M. Franceschetti, L. Booth, M. Cook, J. Bruck, and R. Meester, "Continuum percolation with unreliable and spread out connections," 

Journal of Statistical Physics, vol. 118, pp. 721-734, Feb. 2005. 
[9] O. Dousse, P. Mannersalo, and P. Thiran, "Latency of wireless sensor networks with uncoordinated power saving mechniasm," in Proc. 

ACM MobiHoc'04, pp. 109-120, 2004. 
[10] O. Dousse, M. Franceschetti, and P. Thiran, "Information theoretic bounds on the throughput scaling of wireless relay networks," in 

Proc. IEEE INFOCOM'05, Mar. 2005. 
[11] O. Dousse, F. Baccelli, and P. Thiran, "Impact of interferences on connectivity in ad hoc networks," IEEE Trans. Network., vol. 13, 

pp. 425^36, April 2005. 

[12] O. Dousse, M. Franceschetti, N. Macris, R. Meester, and P. Thiran, "Percolation in the signal to interference ratio graph," Journal of 

Applied Probability, vol. 43, no. 2, 2006. 
[13] Z. Kong and E. M. Yeh, "Distributed energy management algorithm for large-scale wireless sensor networks," in Proc. ACM 

MobiHoc'07, Montreal, Canada, Sep. 2007. 



SUBMITTED TO IEEE TRANSACTIONS ON INFORMATION THEORY 



25 



[14] Z. Kong and E. M. Yeh, "Connectivity and latency in large-scale wireless networks with unreliable links," in Proc. IEEE INFOCOM'08, 
Phoenix, AZ, April 2008. 

[15] Z. Kong and E. M. Yeh, "On the latency of information dissemination in mobile ad hoc networks," in Proc. ACM MobiHoc'08, Hong 
Kong SAR, China, May 2008. 

[16] D. N. Kosterev, C. W. Taylor, and W. A. Mittelstadt, "Model validation for the august 10, 1996 wscc system outage," IEEE Trans, on 

Power Sy.stems, vol. 14, pp. 967-979, Aug. 1999. 
[17] M. L. Sachtjen, B. A. Carreras, and V. E. Lynch, "Disturbances in a power transmission system," Physics Review E, vol. 61, pp. 4877- 

4882, May 2000. 

[18] D. J. Watts, "A simple model of global cascades on random networks," Proc. Natl. Acad. Sci. USA, vol. 99, pp. 5766-5771, 2002. 
[19] M. E. J. Newman, "The structure and function of complex networks," SIAM Review, vol. 45, pp. 167-256, 2003. 
[20] J. Quintanilla, S. Torquato, and R. M. Ziff, "Efficient measurement of the percoaltion threshold for fully penetrable discs," Physics A, 
vol. 86, pp. 399-407, 2000. 

[21] R. Cohen, K. Erez, D. ben Avraham, and S. Havlin, "ResiUence of the internet to random breakdowns," Phys. Rev. Lett, vol. 85, 
pp. 4626-4628, Nov. 2000. 

[22] D. S. Callaway, M. E. J. Newman, S. H. Strogatz, and D. J. Watts, "Network robustness and fragility: percolation on random graphs," 

Phys. Rev. Lett., vol. 85, pp. 5468-5471, Dec. 2000. 
[23] M. E. J. Newman, S. H. Strogatz, and D. J. Watts, "Random graphs with arbitrary degree distributions and their applications," Phys. 
Rev E, vol. 64, no. 026118, 2001. 

[24] R B. Godfrey and D. Ratajczak, "Naps: Scalable, robust topology managemen in wireless ad hoc networks," in Proc. ACM IPSN'04, 
April 2004. 

[25] V. Strassen, "The existence of probabiUty measures with given marginals," Ann. Math. Statist., vol. 36, no. 2, pp. 423^39, 1965. 



